15 lines
506 B
Markdown
15 lines
506 B
Markdown
# Thalos Service Orchestration Boundary
|
|
|
|
## Purpose
|
|
Constrain thalos-service to orchestration responsibilities after thalos-domain extraction.
|
|
|
|
## Service Responsibilities
|
|
- Coordinate identity use-case flow
|
|
- Delegate policy/token decisions to thalos-domain abstractions
|
|
- Adapt transport contracts
|
|
- Route provider metadata (`InternalJwt`, `AzureAd`, `Google`) between edge/service/dal boundaries
|
|
|
|
## Prohibited Responsibilities
|
|
- Owning identity decision policies
|
|
- Owning persistence decision concerns
|